22ffa7d3b6
Bug 504080: Update NSS from NSS_3_12_4_FIPS1_WITH_CKBI_1_75 to
...
NSS_3_12_4_FIPS4 in mozilla-central. r=kaie.
2009-07-28 17:01:39 -07:00
a29c237bb0
Bug 486182, Land NSS 3.12.3 final in mozilla-central
...
r=nelson
2009-04-07 03:36:45 +02:00
feb9d03878
Bug 466745: Upgraded NSS to NSS_3_12_3_BETA3.
2009-02-10 09:18:32 -08:00
004b63cc3f
Bug 473837, land NSS_3_12_3_BETA2
...
r=wtc
2009-01-21 04:43:31 +01:00
2093e3d883
Backout 6c571dc80a99, bug 473837
2009-01-16 20:15:28 +01:00
e61b3c01be
Bug 473837, Import NSS_3_12_3_BETA1
...
r=wtc
2009-01-16 20:01:34 +01:00
7bde85d8aa
Bug 450646, Upgrade Mozilla to NSS 3.12.1 release candidate 1
...
r=rrelyea
2008-08-15 06:12:54 +02:00
381f8d9c63
Import NSS_3_12_RC4
2008-06-06 08:40:11 -04:00
05e5d33a57
Free the (distributed) Lizard! Automatic merge from CVS: Module mozilla: tag HG_REPO_INITIAL_IMPORT at 22 Mar 2007 10:30 PDT,
2007-03-22 10:30:00 -07:00
76317a1b0e
Fix for bug 178894 . Quick decoder updates for lib/certdb and lib/certhigh . r=nelson .
2006-08-07 19:09:41 +00:00
a4db2be2c9
Fix for bug 321765. Allow NSS to decode certs with unsupported critical extensions. r=wtchang,nelson,rrelyea.
2006-02-16 00:06:24 +00:00
6b5d842c09
Fix for bug 217024. add a function for comparing cert validity periods. r=wtchang
2005-08-17 02:04:12 +00:00
26dff248b1
Fix for 217024 . Address Wan-Teh's concerns about naming and documentation. Also fix AIX build by removing extraneous comma.
2005-07-09 00:34:43 +00:00
bae291f63a
Fix for bug 217024 . Add a function to compare validity times. r=relyea
2005-07-08 07:06:56 +00:00
a36a0d6ad4
Bugzilla Bug 287057: fixed memory leaks in callers of cert_FindExtension.
...
pass NULL as the SECItem* argument if we only want to know if the extension
exists but don't need its value. r=jpierre,nelsonb.
Modified Files:
certdb/certdb.c certdb/genname.c certhigh/certhigh.c
certhigh/certhtml.c certhigh/crlv2.c certhigh/ocsp.c
2005-06-30 20:53:57 +00:00
f9e9a4b85f
Export CERT_SequenceOfCertExtensionTemplate on Windows.
...
Fix type of "attributes" member of struct CERTCertificateRequestStr.
Bug 284200. r=nelson.williams & wtchang.
2005-03-05 08:03:04 +00:00
5bf350b4f7
Workaround the occasional SSL server cert that has the step-up OID but
...
not the SSL server OID. Patch by Aaron Spangler <aaron@spangler.ods.org>
Bug 231775. r=nelson
2004-12-02 22:08:14 +00:00
23b32f634b
Treat non-repudiation-only certs as valid signature certs.
...
Bug 240456. r=wtc, sr=relyea.
2004-07-01 00:26:00 +00:00
be72ca16c5
bug 180268, reimplement ssl step-up for builtins
2004-05-17 20:08:38 +00:00
b97913e992
Fix for 240361 - crash in CERT_CheckValidTimes
2004-05-11 02:43:10 +00:00
576e2a2776
Fix for 202979 . Resolve binary compatibility issue for CERT_ImportCerts . r=wtc, jpierre
2004-05-05 01:15:39 +00:00
3634d4d94b
Bug 236613: change to MPL/LGPL/GPL tri-license.
2004-04-25 15:03:26 +00:00
abe92ad094
Remove code that attempted to compare simple host names in URLs with
...
FQDNs in certificate host names. This was insecure. Bug 234058. r=wtc.
2004-04-08 00:17:46 +00:00
a74bbe4b09
Detect NULL arguments to CERT_DecodeTrustString instead of crashing.
...
Bug 235617. r=wtc.
2004-02-26 00:05:29 +00:00
bf2c5e5f16
Bugzilla bug 225808: 1. Use a 32-bit integer type for cert->nsCertType so
...
that it can be safely passed to PR_AtomicSet on all platforms. Note that
we still use an unsigned type to avoid introducing signed/unsigned compiler
warnings. 2. Added a (PRInt32 *) cast to eliminate a pre-existing
signed/unsigned warning. r=nelsonb.
Modified Files: certdb.c certt.h
2004-02-07 01:41:15 +00:00
6d506e4aea
Export cert functions that decode extensions and traverse decoded
...
extensions. Bug 231881. r= relyea, wtc.
2004-01-28 23:23:45 +00:00
7709686c56
Correct NSS's key usage tests for certs with non-RSA public keys.
...
Bug 221638. r=relyea.
2004-01-22 22:04:54 +00:00
ad4476ab50
Fix NSS parsing of Issuer Unique ID and Subject Unique ID fields in
...
certificate. Bug 216116. r=jpierre
2004-01-16 02:11:44 +00:00
70f0bbf00d
Rename CERT_DecodeTimeChoice/CERT_EncodeTimeChoice to DER_DecodeTimeChoice/DER_EncodeTimeChoice
2004-01-07 23:07:24 +00:00
ec4dda5d19
Bugzilla bug 219982: removed an unused local variable. (The function call
...
is needed for its side effect.) Thanks to timeless@bemail.org and
Serge GAUTHERIE <gautheri@noos.fr> for the patch. r=wtc.
2003-12-17 22:43:25 +00:00
fff428a34a
CERT_ImportCerts now returns SECFailure when NONE of the certs was succesfully imported. r=wtc. Bugscape bug 54311.
2003-12-06 06:52:53 +00:00
b904b47318
Detect empty emailAddr strings in CERTCertificates. Bugzilla bug 211540.
...
Modified Files:
cmd/dbck/dbck.c cmd/signtool/util.c lib/certdb/certdb.c
lib/certdb/stanpcertdb.c lib/pkcs7/p7decode.c lib/pki/certificate.c
lib/pki/pki3hack.c lib/smime/cmssiginfo.c lib/softoken/pkcs11u.c
2003-11-15 00:10:01 +00:00
7d744437c3
Fix for bug 143334 : add support for GeneralizedTime in certificates and CRLs. r=wtc,nelsonb
2003-09-19 04:08:51 +00:00
e7297b0a76
Fix bug 213084. Detect when cert in signature cannot be imported.
...
Detect NULL pointer, don't crash.
2003-07-31 00:16:27 +00:00
04e80d83ca
Bug 212004: in CERT_IsUserCert we should test for a null cert->trust and
...
treat it as no trust. r=nelsonb.
2003-07-09 04:12:16 +00:00
f54ce239c6
Fix for 201134 - race condition when verifying certs. Don't reset the value of nsCertType in CERTCertificate in the middle of the computation. r=nelsonb
2003-04-17 00:32:54 +00:00
126930373b
Bug 142867: pk12util needs to be able to import intermediate CA's into hw
...
tokens.
2003-03-24 19:09:08 +00:00
340366e2ff
Fix crash in CERT_CheckKeyUsage caused by dereferencing a returned pointer
...
without checkin it for NULL.
2003-01-31 02:49:13 +00:00
b5e025dea3
Bug 183612: renamed some new functions to be consistent with existing
...
function names containing SubjectKey and PublicKey. Moved internal
functions to private headers and use the lowercase cert_ prefix for the
internal functions for subject key ID mapping hash table. r=nelsonb.
2002-12-19 00:26:34 +00:00
12860a5501
Bug 183612: added support for looking up a cert by subject key ID and
...
creating a CMS recipient info from a subject key ID. The patch was
contributed by Javi Delgadillo <javi@netscape.com>. r=relyea, wtc.
Modified Files:
certdb/cert.h certdb/certdb.c certdb/certdb.h certdb/certv3.c
certdb/stanpcertdb.c nss/nss.def nss/nssinit.c
pk11wrap/pk11cert.c pk11wrap/pk11func.h pk11wrap/secmod.h
pki/pki3hack.c smime/cms.h smime/cmslocal.h smime/cmspubkey.c
smime/cmsrecinfo.c smime/cmssiginfo.c smime/cmst.h
smime/smime.def
2002-12-17 01:39:46 +00:00
a4ffefd8be
Support SHA256, SHA384, and SHA512 hashes in NSS.
2002-12-12 06:05:45 +00:00
25d4b3dd39
Include certi.h to resolve invocation of undeclared function.
2002-10-23 22:00:48 +00:00
b0c5f20ec4
Add 2 new functions to NSS, so an application can get a list of all
...
email addresses in a cert. Bug 152986.
Modified Files: lib/nss/nss.def lib/certdb/alg1485.c lib/certdb/cert.h
lib/certdb/certdb.c lib/certdb/certi.h
2002-10-23 20:50:51 +00:00
b0fe3718ae
Fix for 164744 - implement new functions for pk12util . r=wtc
2002-10-03 03:35:32 +00:00
6199159d80
bug 171224, changes to path construction
...
r=nelsonb
2002-10-01 14:32:15 +00:00
463500a5ab
Convert slow SEC_ASN1DecodeItem calls to SEC_QuickDERDecodeItem where possible. Performance improvement. Bug #160805 . r=relyea
2002-08-24 00:52:47 +00:00
2190605135
Bug 164035: checked in a small code optimization suggested by
...
J�rg Brunsmann <joerg_brunsmann@yahoo.de>. Use the local variable that
has the same value.
2002-08-22 18:05:32 +00:00
401d42ef18
Bug 163863: removed duplicate PORT_Memset calls in CERT_KeyFromDERCert.
...
Thanks to J�rg Brunsmann <joerg_brunsmann@yahoo.de> for the fix.
2002-08-21 18:05:20 +00:00
0fb6e546c6
bug 161552: Make the recipient list traversal functions call the internal
...
nsstoken_FindCertByIssuerAndSN() function to gain the benefit of the fixed
Searching code.
2002-08-14 20:42:40 +00:00
8fa534cac0
Fix compiler warnings on NT
2002-08-02 00:53:15 +00:00
Wan-Teh Chang
Kai Engert
Benjamin Smedberg
hg@mozilla.com
julien.pierre.bugs%sun.com
wtchang%redhat.com
nelsonb%netscape.com
ian.mcgreer%sun.com
jpierre%netscape.com
gerv%gerv.net
wchang0222%aol.com
wtc%netscape.com
relyea%netscape.com